Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa
File:                     c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa (raw, json)
Hash identifier:          A5YWrkBO6oQfPzAE1OyUo7C5hD3xX9XRQjy5OlqZrco=
Subject key identifier:   B8:14:45:8E:70:A1:9C:BD:B6:88:D3:E7:D1:76:17:95:59:C9:D9:13
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584D4D5A5DAE5AB1EBD0FE6221F0
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     15344
IP address blocks:        24.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5d:ae:5a:b1:eb:d0:fe:62:21:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=33606989-83ef-4d26-8d96-58a2a3eb8eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:71:fa:92:47:cc:2a:f3:bb:c4:3d:43:2e:
                    53:5f:f2:28:36:bc:0e:8f:3e:f0:7c:ea:f4:89:fe:
                    96:b4:3e:10:9b:8a:3f:7a:4b:fd:f9:b7:40:ad:4a:
                    81:4c:55:68:2d:07:72:3b:c2:e0:fa:46:60:95:b9:
                    ea:d8:5d:16:b1:8f:0b:98:2e:4e:ce:4c:3e:1e:15:
                    cd:21:52:0f:4f:5a:59:30:d3:25:57:e9:2d:01:6c:
                    81:07:f0:44:1f:24:5d:70:f1:02:e2:06:e0:7a:a2:
                    08:c4:cf:ca:bf:7d:8a:c0:62:cd:35:55:8f:2e:0c:
                    ff:43:3f:17:92:69:87:52:99:35:f4:b3:5b:33:df:
                    2b:ed:37:6a:83:41:6b:69:24:ca:21:30:ac:9f:7e:
                    e5:02:40:58:29:ee:a3:08:4a:a0:44:79:43:20:00:
                    16:88:62:31:0f:e5:14:32:d1:85:7f:f8:3d:e1:1f:
                    cb:b8:17:2e:76:07:18:76:59:14:9b:fe:72:98:22:
                    a5:09:0c:5f:83:78:65:38:3e:a2:d8:ad:96:85:b0:
                    f2:0e:52:99:a5:6f:ef:d3:b8:96:f9:0c:58:89:d6:
                    3d:ab:19:8c:a4:c6:77:bd:2b:da:4a:63:61:ae:ec:
                    15:da:60:4a:16:9b:28:d7:48:20:26:6d:1e:60:eb:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:14:45:8E:70:A1:9C:BD:B6:88:D3:E7:D1:76:17:95:59:C9:D9:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.92.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:70:84:99:23:7c:76:88:c6:9b:39:ee:36:d9:14:70:7e:
         3c:50:5a:ae:13:b0:76:98:8e:04:d9:ec:6c:43:ee:9c:bb:2d:
         89:8d:97:13:c3:a9:dc:65:12:19:23:85:ce:b2:c4:64:78:92:
         55:6f:96:6d:3d:f4:db:fc:8d:5b:01:61:f2:e1:e2:35:ae:be:
         a9:7b:81:bc:aa:93:60:30:0d:24:a2:08:00:82:69:4f:6d:8d:
         fa:2e:cf:79:c4:b9:82:aa:08:8e:fe:c3:e3:80:ad:78:f1:8b:
         cd:99:0a:aa:77:b5:9a:69:ff:be:20:02:f5:11:25:41:16:57:
         b4:25:59:8e:e7:47:3d:97:5b:2e:1e:ba:e8:e1:7c:8a:d4:f4:
         42:ed:b4:45:f0:89:c8:19:91:e2:d7:53:28:58:44:97:e8:9d:
         be:f5:e1:59:05:29:83:fe:f8:f8:7d:c3:b8:c5:e8:04:5c:00:
         b0:79:b7:58:fb:87:b8:1d:fc:f9:75:1e:b0:11:f7:27:91:70:
         ad:c9:8c:33:e7:37:62:57:df:31:bf:7c:43:55:0a:e0:1a:4c:
         d1:42:0b:d3:40:88:ad:6e:2f:ab:38:34:da:74:8a:9e:b0:5d:
         d9:d7:b3:c4:13:ec:85:14:6a:cd:12:e9:4f:1d:a4:44:90:55:
         fe:02:f6:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWl2uWrHr0P5iIfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU3MjY0ZjgtMDQ3NC00M2QwLTlhM2ItNWY1M2NlMjg3
OTBkMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
MzM2MDY5ODktODNlZi00ZDI2LThkOTYtNThhMmEzZWI4ZWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUlx+pJHzCrzu8Q9Qy5TX/IoNrwOjz7wfOr0
if6WtD4Qm4o/ekv9+bdArUqBTFVoLQdyO8Lg+kZglbnq2F0WsY8LmC5Ozkw+HhXN
IVIPT1pZMNMlV+ktAWyBB/BEHyRdcPEC4gbgeqIIxM/Kv32KwGLNNVWPLgz/Qz8X
kmmHUpk19LNbM98r7Tdqg0FraSTKITCsn37lAkBYKe6jCEqgRHlDIAAWiGIxD+UU
MtGFf/g94R/LuBcudgcYdlkUm/5ymCKlCQxfg3hlOD6i2K2WhbDyDlKZpW/v07iW
+QxYidY9qxmMpMZ3vSvaSmNhruwV2mBKFpso10ggJm0eYOs/rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgURY5woZy9tojT59F2F5VZydkTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NTcy
NjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUzY2UyODc5MGQvYzgxNDBmNzEtZThhNS0z
ZjU5LWJmZTAtNDc3OWRiYWVkMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTU3MjY0ZjgtMDQ3NC00M2QwLTlh
M2ItNWY1M2NlMjg3OTBkLzk1NzI2NGY4LTA0NzQtNDNkMC05YTNiLTVmNTNjZTI4
NzkwZC5jcmwwHwYDVR0jBBgwFoAUjp0RFmde0khG8GrYVAdVgPAWzC8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85NTcyNjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUz
Y2UyODc5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGFyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjrcISZI3x2iMabOe422RRwfjxQWq4TsHaYjgTZ7GxD7py7LYmNlxPD
qdxlEhkjhc6yxGR4klVvlm099Nv8jVsBYfLh4jWuvql7gbyqk2AwDSSiCACCaU9t
jfouz3nEuYKqCI7+w+OArXjxi82ZCqp3tZpp/74gAvURJUEWV7QlWY7nRz2XWy4e
uujhfIrU9ELttEXwicgZkeLXUyhYRJfonb714VkFKYP++Ph9w7jF6ARcALB5t1j7
h7gd/Pl1HrAR9yeRcK3JjDPnN2JX3zG/fENVCuAaTNFCC9NAiK1uL6s4NNp0ip6w
XdnXs8QT7IUUas0S6U8dpESQVf4C9nM=
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:28 2026 by rpki-client